Method and Apparatus for Large Scale Analysis of Push-To-Talk Traffic

1. A method of passive evaluation of push-to-talk traffic in a communication network, said passive evaluation implying non-intrusive monitoring of ongoing processes without interference or disturbance of network operation and push-to-talk traffic is generated through at least one push-to-talk session dividing into a plurality of data transactions according to different classes, a first traffic class covers interactions between a user terminal and the communication network for log-on of user terminals to the communication network, a second traffic class covers interactions between a user terminal and a push-to-talk management node in the communication network for push-to-talk session initialization, and a third traffic class covers exchange of push-to-talk payload data among user terminals, the method comprising the steps: capturing data transaction in the communication network by time-stamping data packets exchanged during data transactions and storing time stamped captured data packets in a trace memory; extracting interpretations of data transactions being relevant for push-to-talk, traffic classes, and users, from captured data transactions; storing a correlation of extracted interpretations of data transactions being relevant for push-to-talk, traffic classes, and users in a traffic data base; and calculation at least on performance indicator with respect to at least one selected push-to-talk session as a function of information stored in the traffic database.

2. The method according to claim 1 , wherein the step of capturing data transactions comprises a step of de-multiplexing data packets associated with the data transactions on the basis of time stamped data packets stored in the trace memory and on the basis of configuration information.

3. The method according to claim 1 , wherein the step of de-multiplexing comprises the step recognizing data packet types is changed dynamically on the basis of feedback from data transaction analysis.

4. The method according to claim 1 , further comprising a step of analyzing control packets exchanged with data transactions establishing a data packet context according to a data packet context protocol to identify communication addresses of new active users.

5. The method according to claim 4 , further comprising a step of feeding back a relation between an analyzed communication address and a related active user identification for de-multiplexing of data packets.

6. The method according to claim 4 , further comprising a step of forwarding a data packet context record to the traffic database, wherein the data packet context record contains information reflecting the correlation between the analysis of data packets exchanged for establishing a data packet context and the indication of the first traffic class.

7. The method according to claim 6 , wherein traffic characteristics of the first traffic class cover active user identification, communication address, and/or data packet context parameters.

8. The method according to claim 1 , further comprising a step of analyzing data packets exchanged with data transactions for execution of an initialization of active users participating in a push-to-talk session according to a session initialization and a session description protocol.

9. The method according to claim 8 , further comprising a step of de-compressing data packets exchanged with data transactions for executing initialization of active users maintaining an aggregated state memory for decompression such that the states of all data transactions in the second traffic class are represented.

10. The method according to claim 9 , further comprising a step of managing the aggregated state memory such that states may be deleted automatically.

11. The method according to claim 9 further comprising a step of forwarding a session record to the traffic database, wherein the session record contains information reflecting the correlation between push-to-talk session identification, the analysis of data packets exchanged for execution of initialization of active users participating in a push-to-talk session, and the indication of the second traffic class.

12. The method according to claim 8 , further comprising a step of feeding back information for de-multiplexing of data packets, wherein the information describes communication ports used for exchange of information according to a session payload data transfer protocol and/or a session payload data transfer control protocol, identification of initiated sessions, and/or identification of called active users.

13. The method according to claim 1 , further comprising a step of analysing data packets exchanged with data transaction for control of transfer of push-to-talk session payload data and/or for quality reporting according to a session payload data transfer control protocol.

14. The method according to claim 13 , further comprising a step of feeding back information for demultiplexing of data packets, wherein the information describes control of transfer of push-to-talk session payload data.

15. The method according to claim 13 further comprising a step of forwarding a payload data transfer control record to the traffic database, wherein the payload data transfer control record reflects the correlation between the related push-to-talk session identification, the analysis of data packets exchanged for control of transfer of push-to-talk session payload data and/or for quality reporting, the identification of corresponding payload data transactions of the same user, and a reference to payload and control data of further participants of the same push-to-talk session.

16. The apparatus according to claim 13 , the third analysis unit being adapted to forward a payload data transfer control record to the traffic database, wherein the payload data transfer control record reflects the correlation between the related push-to-talk session identification, the analysis of data packets exchanged for control of transfer of push-to-talk session payload data and/or for quality reporting, the identification of corresponding payload data transactions of the same user, and a reference to payload and control data of further participants of the same push-to-talk session.

17. The method according to claim 1 , further comprising a step of analyzing data packets exchanged with data transactions according to a session payload data transfer protocol during transfer of push-to-talk session payload data for reconstruction of related payload data bursts.

18. The method according to claim 17 , further comprising a step of forwarding a payload data transfer record to the traffic database, wherein the payload data transfer record reflects the correlation between the related push-to-talk session identification, the analysis of data packets exchanged for transfer of push-to-talk session payload data, the identification of corresponding control data transactions, and a reference to payload and control data of further participants of the same push-to-talk session.

19. The method, according to claim 1 , operating on a fourth traffic class covering interactions between a group management node in the communication network and user terminals for group management and access control, and that it comprises a step of analyzing data packets exchanged with data transactions for group management and access control according to a control information data transfer protocol.

20. The method according to claim 19 further comprising a step of forwarding a session management record to the traffic database, wherein the session management record reflects the correlation between push-to-talk session identification and the analysis of data packets exchanged for group management and access control.

21. The method according to claim 20 , further comprising a step of feeding back information for demultiplexing of data packets, wherein the information describes user group identifications and/or access lists .

22. The method according to claim 1 , performance indicators being defined, respectively, for data packets selected from a group comprising data packets exchanged for establishing a data packet context according to a data packet context protocol according to the first traffic class, data packets exchanged for executing an initialization for active users participating in the push-to-talk session according to a session initialization and a session description protocol according to the second traffic class, data packets exchanged for forwarding group management and access control information to each active user according to a control information data transfer protocol according to the fourth traffic class, data packets exchanged for transfer of push-to-talk payload data according to a session payload data transfer protocol according to the third traffic class, and data packets exchanged for control of push-to-talk payload data transfer according to a payload data transfer control protocol according to the third traffic class.

23. The method according to claim 22 , wherein the step of calculating at least one performance indicator comprises the steps: querying the traffic database for information records containing information having relevance for the performance indicator; and calculating the performance indicator from information comprised in relevant information records.

24. The method according to claim 23 , further comprising the step of filtering relevant information records to focus on a subset of push-to-talk sessions and/or active users.

25. The method according to claim 23 , wherein the step of calculating the performance indicator is achieved by applying a statistical function onto information comprised in relevant information records.

26. The method, according to claim 1 , being executed at a standard network interface of the communication network.

27. An apparatus adapted for passive evaluation of push-to-talk traffic in a communication network, wherein push-to-talk traffic is generated through at least one push-to-talk session dividing into a plurality of data transactions according to different traffic classes, a first traffic class covers interactions between a user terminal and the communication network for logon of user terminals to the communication network, a second traffic class covers interactions between a user terminal and a push-to-talk management node in the communication network for push-to-talk session initialization, and a third traffic class covers push-to-talk payload data exchange among user terminals, said passive evaluation implying non-intrusive monitoring of ongoing processes without interference or disturbance of network operation, the apparatus comprising: a capturing unit, adapted to capture data transactions in the communication network, the capturing unit comprising: a time-stamping unit adapted to time stamp data packets exchanged during data transactions and a trace memory adapted to store time stamped captured data packets in a trace memory; an extracting unit adapted to extract interpretations of data transactions being relevant for push-to-talk, traffic classes, and users, from captured data transactions; a storing unit adapted to store a correlation of extracted interpretations of data transactions being relevant for push-to-talk, traffic classes, and users in a traffic data base; and a calculation unit adapted to calculate at least one performance indicator with respect to at least one selected push-to-talk session as a function of information stored in the traffic database.

28. The apparatus according to claim 27 , the capturing unit comprising a de-multiplexing unit adapted to de-multiplex data packets associated with the data transactions on the basis of time stamped data packets stored in the trace memory and on the basis of configuration information.

29. The apparatus according to claim 28 , wherein the de-multiplexing unit is adapted to recognize data packet types dynamically on the basis of feedback from data transaction analysis.

30. The apparatus according to claim 27 , further comprising a first analysis unit adapted to analyze control packets exchanged with data transactions establishing a data packet context according to a data packet context protocol to identify communication addresses of new active users.

31. The apparatus according to claim 30 , the first analysis unit being adapted to feedback a relation between an analyzed communication address and a related active user identification for demultiplexing of data packets.

32. The apparatus according to claim 30 , wherein the first analysis unit being adapted to forward a data packet context record to the traffic database, wherein the data packet context record contains information reflecting the correlation between the analysis of data packets exchanged for establishing a data packet context and the indication of the first traffic class.

33. The apparatus according to claim 32 , wherein traffic characteristics of the first traffic class cover active user identification, communication address, and/or data packet context parameters.

34. The apparatus according to claim 27 , further comprising a second analysis unit adapted to analyze data packets exchanged with data transactions for execution of an initialization of active users participating in a push-to-talk session according to a session initialization and a session description protocol.

35. The apparatus according to claim 34 , further comprising a de-compression unit adapted to decompress data packets exchanged with data transactions for executing initialization of active users and to maintain an aggregated state memory for decompression such that the states of all data transactions in the second traffic class are represented.

36. The apparatus according to claim 35 , the de-compression unit being adapted to manage the aggregated state memory such that states may be deleted automatically.

37. The apparatus according to claim 34 , the second analysis unit being adapted to feedback information for de-multiplexing of data packets, wherein the information describes communication ports used for exchange of information according to a session payload data transfer protocol and/or a session payload data transfer control protocol, identification of initiated sessions, and/or identification of called active users.

38. The apparatus according to claim 34 , the second analysis unit being adapted to forward a session record to the traffic database, wherein the session record contains information reflecting the correlation between push-to-talk session identification, the analysis of data packets exchanged for execution of initialization of active users participating in a push-to-talk session, and the indication of the second traffic class.

39. The apparatus according to claim 27 , further comprising a third analysis unit adapted to analyze data packets exchanged with data transactions for control of transfer of push-to-talk session payload data and/or for quality reporting according to a session payload data transfer control protocol.

40. The apparatus according to claim 39 , the third analysis unit being adapted to feedback information for de-multiplexing of data packets, wherein the information describes control of transfer of push-to-talk session payload data.

41. The apparatus according to claim 27 , further comprising a fourth analysis unit adapted to analyze data packets exchanged with data transactions according to a session payload data transfer protocol during transfer of push-to-talk session payload data for reconstruction of related payload data bursts.

42. The apparatus according to claim 41 , the fourth analysis unit being adapted to forward a payload data transfer record to the traffic database, wherein the payload data transfer record reflects the correlation between the related push-to-talk session identification, the analysis of data packets exchanged for transfer of push-to-talk session payload data, the identification of corresponding control data transactions, and a reference to payload and control data of further participants of the same push-to-talk session.

43. The apparatus according to claim 27 , operating on a fourth traffic class covering interactions between a group management node in the communication network and user terminals for group management and access control, and that it comprises a fifth analysis unit adapted to analyze data packets exchanged with data transactions for group management and access control according to a control information data transfer protocol.

44. The apparatus according to claim 43 , the fifth analysis unit being adapted to feedback information for de-multiplexing of data packets, wherein the information describes user group identifications and/or access lists.

45. The apparatus according to claim 43 the fifth analysis unit being adapted to forward a session management record to the traffic database, wherein the session management record reflects the correlation between push-to-talk session identification and the analysis of data packets exchanged for group management and access control .

46. The apparatus according to claim 27 the calculation unit being adapted to calculate performance indicators that are defined, respectively, for data packets selected from a group comprising data packets exchanged for establishing a data packet context according to a data packet context protocol according to the first traffic class, data packets exchanged for executing an initialization for active users participating in the push-to-talk session according to a session initialization and a session description protocol according to the second traffic class, data packets exchanged for forwarding group management and access control information to each active user according to a control information data transfer protocol according to the fourth traffic class, data packets exchanged for transfer of push-to-talk payload data according to a session payload data transfer protocol according to the third traffic class, and data packets exchanged for control of push-to-talk payload data transfer according to a payload data transfer control protocol according to the third traffic class.

47. The apparatus according to claim 46 , the calculation unit comprising: a querying unit adapted to query the traffic data base for information records containing information having relevance for the performance indicator; and a calculator adapted to calculate the performance indicator from information comprised in relevant information records.

48. The apparatus according to claim 47 the calculator being adapted to apply a statistical function onto information comprised in relevant information records.

49. The apparatus according to claim 46 further comprising a filtering unit adapted to filter relevant information records to focus on a subset of push-to-talk sessions and/or active users.

50. The apparatus according to claim 27 being installed at a standard network interface of communication network.